@dafu09.bsky.socialZ.ai 的编码 harness「ZCode」被开发者抓包： 启动时静默把本地 workspace 快照上传到海外服务器。 一个安装就产生了 313MB 加密压缩包、 42,411 个文件、564 次失败上传。 官方回应：只是 telemetry，随后移除并开源。 「免费好用」的 Agent 工具， 可能正在搬空你的整个仓库👇🧵 #AIAgent #AgentSecurity #SupplyChain
@cyfar.ca@socket.dev
Malicious npm/PyPI releases launch sckit to steal developer secrets and exfiltrate them to skyleen.fr.
-
IOCs: skyleen[.]fr, sckit
-
#Malware #SupplyChain #ThreatIntel
@cvinvesting.bsky.socialRed Sea ship transits fell from ~100/day to near zero.
It’s basic math: rerouting around Africa adds 10-14 days, tying up container capacity and spiking freight rates.
Supply chain friction returns.
Join Patreon:
patreon.com/ClearValueInvesting
@gtbarry.bsky.socialFlock Once Touted Its Cameras as Made in the USA. Now It’s Not So Clear
Flock’s manufacturing #supplychain has received scant attention, even though where its hardware is produced could have implications for #nationalsecurity
@rdicosmo.bsky.socialMeasure what survives without an archive: after five years, 8.5% of one software distribution's sources are gone, and another 1% still download perfectly — but they are no longer the same bytes. 👉 www.dicosmo.org/good-enough/ #GoodEnoughIsNotGoodEnough #DigitalPreservation #SupplyChain
@hansato.com🇲🇾 Malaysia's export engine is running hot
August exports: +45.5% YoY
Trade surplus: RM28.1B — 76th con. month
E&E exports: +66.5%, driven by AI demand
Exports to the US: +130%
This isn't just a rebound. It's a structural shift.
@thedailytechfeed.comMalicious MemTensor packages deliver sckit credential-stealer via npm & PyPI—update and rotate secrets now. #SupplyChain #Malware #OpenSourceSecurity #CredentialTheft #CI/CD #MemTensor thedailytechfeed.com/memtensor-su...
@leansupplai.bsky.socialOn September 21, 2026, the U.S. published its final antidumping duty results for South Korean producer SeAH Steel. The action covers the 2023-2024 review period for Heavy Walled Rectangular Welded Carbon Steel. https://leansupplai.com/en/suppliers/85630 #SupplyChain #GlobalTrade #SteelIndustry
@cdswltd.bsky.socialDid You Know? 🚛
A fully loaded artic can carry the equivalent of up to 60,000 cereal boxes in one journey. Efficient freight transport keeps supply chains moving and businesses supplied across the UK. 📦
#DidYouKnow #RoadHaulage #SupplyChain #TeamCDSW #DeliverLoadsOfQuality
@systemmargin.bsky.social3/7
The test is embarrassingly simple, which is exactly why almost nobody does it:
If this company vanished tomorrow, could someone else step in within a month?
If yes, you've got nothing. Just a story.
#SupplyChain #Bottleneck
@systemmargin.bsky.social2/7
A bushing without one small part is a pile of porcelain.
The real problem sits 2-3 levels down. Right where nobody bothers to look.
So you ask one question: Who controls that small link in the chain?
#SupplyChain #Bottleneck
@bidciticom.bsky.social🚛💨 Stop bleeding $500–$5,000 a month on pieced-together logistics software when you can just buy the whole farm. 🚜
Take control of your tech stack and scale on your own terms. 📈
#LogisticsTech #FreightBrokerage #SupplyChain #SoftwareBuyout #LTLFreight #Procurement #FreightTech #BidCitiPro
@breakbulk.bsky.socialConnected execution is reshaping #logistics as #AI agents, real time #visibility and orchestration move closer to physical operations, promising faster responses to disruptions while keeping human oversight and operational constraints firmly in the loop. #freight #supplychain
@reput.ioThis week's malware didn't need a click. It came in via npm install and AI chat links. One crew faked 370M npm downloads so the counter read "trusted". Another served stealers off real claude.ai links. Reputation Radar #12: https://www.reput.io/blog/reputation-radar-12 #ThreatIntel #SupplyChain
@breakbulk.bsky.socialGermany’s #machinery downturn is colliding with improving orders, raising the risk that lost supplier capacity could become the next #projectcargo bottleneck as #Germany’s industrial cycle turns. #logistics #supplychain #manufacturing
@logistics-basel.bsky.social📦🔍New Research in Logistics
Generative Artificial Intelligence in Supply Chain: Review, Trends, and Future Directions
by Baruah et al.
🔗 Free to read: www.mdpi.com/2305-6290/10...
@thedailytechfeed.comA fake Twilio bug-bounty npm package stole dev credentials under disguise. Audit dependencies carefully. #SecurityNews #npm #SupplyChain #Twilio #Malware #DeveloperSecurity https://thedailytechfeed.com/malicious-npm-package-masquerades-as-twilio-probe-steals-credentials/
@steelwise.bsky.socialThink about what people type into your website: card details, logins, enquiry forms. Every third-party script on the page can read it, and a supplier can change them tonight without telling you. Most sites load five to 20. Read the filing #supplychain #javascript #csp #infosec
@ukprepperhub.bsky.social🚢 Supply Chain — Oil Below $100
Brent slips to around $98 as Saudi restarts a pipeline that avoids Hormuz. Relief at the pump will take time. https://ukprepperhub.co.uk/2oh3?utm_source=bluesky&utm_medium=social&utm_campaign=daily-news
#SupplyChain #OilPrices #UKPrepperHub
@techblog98.bsky.socialExplore Supply Chain Network Design solutions, AI-powered optimization, digital twins, scenario planning, and vendor capabilities with QKS Group.
Download Sample Report Here: qksgroup.com/download-sam...
#SupplyChainNetworkDesign #SupplyChain #SupplyChainManagement #SupplyChainOptimization